News for hackers. Stuff that matters.

A comment on 0patching a 0-day: Windows gdi32.dll memory disclosure.

Re:0patching a 0-day: Windows gdi32.dll memory disclosure by sst8 on Thursday March 02, 2017 @10:49AM (#13774901)
Live patching is gaining the momentum - see Ksplice, Kpatch, kGraft, XEN and similar
[ Parent | on HN ]
Re:0patching a 0-day: Windows gdi32.dll memory disclosure by guipsp on Thursday March 02, 2017 @11:47AM (#13775550)
This is not live patching.
[ Parent | on HN ]
Re:0patching a 0-day: Windows gdi32.dll memory disclosure by j_s on Friday March 03, 2017 @09:38AM (#13783099)
A 0patch employee stopped by to explain that they live patch user mode only at this point on Windows, kernel mode is a future goal.

https://news.ycombinator.com/item?id=13782830

[ Parent | on HN ]
Re:0patching a 0-day: Windows gdi32.dll memory disclosure by Dylan16807 on Thursday March 02, 2017 @08:45PM (#13780117)
Except with microsoft where they have stopped using their live patching code and just force reboots on the user.
[ Parent | on HN ]
Re:0patching a 0-day: Windows gdi32.dll memory disclosure by Quppa on Friday March 03, 2017 @01:11AM (#13781083)
Indeed - hotpatching support was removed in Windows 8. Apparently it was only ever used in a few updates, and some unscrupulous folks took advantage of the capability: https://arstechnica.com/security/2016/04/hacking-group-plati...
[ Parent | on HN ]